.codex-plugin/plugin.json

{
  "apps": "./.app.json",
  "author": {
    "name": "HORIZON SHIELD"
  },
  "description": "This plugin exposes a public register of measured conduct for MCP servers.\n\nFive conditions are measured on a schedule: the server speaks MCP, it publishes an A2A agent card, it declares who pays it, identical input returns identical output, and the verdict itself can be recomputed by a third party. A condition that could not be measured is recorded as not measured. It is never counted as a pass, and that rule is not relaxed for the operator of the register.\n\nThe register does not rank servers. It does not recommend one server over another. It returns what was measured, when it was measured, and the SHA-256 of the record so that the reading can be checked by someone who does not trust the party that issued it.\n\nAn endpoint that is absent from the register has simply never been measured here. Absence is reported as absence and is not a negative verdict.\n\nDeterminism is not measured unless the owner of the checked server has recorded consent, because measuring it requires executing a tool on someone else's server.\n\nFree, read only, no account and no key. The register is a build artefact of a scheduled script with no editorial step, and it is archived with a DOI so a citation survives the repository moving.",
  "interface": {
    "capabilities": [],
    "category": "Developer Tools",
    "defaultPrompt": [
      "What does this register measure, and what does it explicitly not verify?",
      "Measure https://mcp.horizonshield.dev/mcp against the register's conditions and tell me which conditions could not be measured.",
      "Is https://gate.horizonshield.dev/mcp on the register, and when was it last measured?"
    ],
    "developerName": "HORIZON SHIELD",
    "displayName": "MCP Conduct Register",
    "longDescription": "This plugin exposes a public register of measured conduct for MCP servers.\n\nFive conditions are measured on a schedule: the server speaks MCP, it publishes an A2A agent card, it declares who pays it, identical input returns identical output, and the verdict itself can be recomputed by a third party. A condition that could not be measured is recorded as not measured. It is never counted as a pass, and that rule is not relaxed for the operator of the register.\n\nThe register does not rank servers. It does not recommend one server over another. It returns what was measured, when it was measured, and the SHA-256 of the record so that the reading can be checked by someone who does not trust the party that issued it.\n\nAn endpoint that is absent from the register has simply never been measured here. Absence is reported as absence and is not a negative verdict.\n\nDeterminism is not measured unless the owner of the checked server has recorded consent, because measuring it requires executing a tool on someone else's server.\n\nFree, read only, no account and no key. The register is a build artefact of a scheduled script with no editorial step, and it is archived with a DOI so a citation survives the repository moving.",
    "privacyPolicyURL": "https://shield.the-horizons-innovation.com/verify-directory/privacy/",
    "shortDescription": "Check MCP server conduct",
    "supportURL": "https://github.com/ogasurfproject-jpg/horizon-shield/issues",
    "termsOfServiceURL": "https://shield.the-horizons-innovation.com/tos/",
    "websiteURL": "https://shield.the-horizons-innovation.com/verify-directory/"
  },
  "name": "app-6a84283581f08191b0cab72626586efd",
  "version": "1.0.0"
}